DevGuard Example Repository

This is a test repository for DevGuard. It exists purely to support and illustrate the DevGuard documentation — it is not a real application and is not intended for production use.

Purpose

The repository provides a minimal, reproducible setup that the documentation can point at when explaining DevGuard concepts, such as:

• running DevGuard scans in a CI/CD pipeline,
• building container images and attaching attestations,
• inspecting the resulting SBOMs, vulnerability reports and provenance data.

Contents

• Dockerfile — a small multi-stage build on top of a DevGuard base image that carries attestations, used as the example artifact for scanning and signing.

Further Reading

See the official DevGuard documentation at https://devguard.org for the walkthroughs that reference this repository.